Community Office Hours

Security: Enterprise Security (ES)

Technical Splunk experts answer questions and provide how-to guidance

Community Office Hours is an ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics.

This is your opportunity to ask questions related to your specific Splunk Enterprise Security

• What are some tips and tricks for getting started and becoming an expert in ES?
• What are the best practices for implementing threat detection, and what is the latest security content from the threat research team?
• How to implement use cases like RBA, incident management, and threat hunting?
• What to expect in Enterprise Security 8.0, including the Mission Control interface and SOAR integration?
• Which Splunkbase apps and add-ons are recommended for ES use cases
• Anything else you’d like to learn!

We look forward to seeing you there!

Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here).

Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants.

Registration Closed